Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/afcaaaa5-f490-41a9-9427-d1f11ebe39a0/87e2d1044b2d3cea1798d05fa76266bef1de1574.mft
File:                     87e2d1044b2d3cea1798d05fa76266bef1de1574.mft (raw, json)
Hash identifier:          XYZ22dQDFAWH4EvoVxtKXmZxXz32A/tQvgXd2V5wPTM=
Subject key identifier:   04:7E:48:EA:A8:F0:58:E8:EF:35:DE:83:18:A3:F6:BB:B2:41:81:7D
Authority key identifier: 72:F6:C8:E3:79:00:47:B2:F7:95:DD:D7:A3:29:63:EA:E9:6D:22:A2
Certificate issuer:       /CN=87e2d1044b2d3cea1798d05fa76266bef1de1574
Certificate serial:       04E3D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87e2d1044b2d3cea1798d05fa76266bef1de1574.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/afcaaaa5-f490-41a9-9427-d1f11ebe39a0/87e2d1044b2d3cea1798d05fa76266bef1de1574.mft
Manifest number:          0298
Signing time:             Mon 15 Apr 2024 04:21:26 +0000
Manifest this update:     Mon 15 Apr 2024 03:20:26 +0000
Manifest next update:     Thu 18 Apr 2024 06:22:26 +0000
Files and hashes:         1: 44383e89b9bd09847a6bd55cac67d100890617ef.roa (hash: iOVdYxpKSMcLXgb1/qgRfRPZ/3N1dbt9J1pVOQ1kexw=)
                          2: 87e2d1044b2d3cea1798d05fa76266bef1de1574.crl (hash: Cy+10vQ6XhvJwPCdG8m3eCkNO9cfV05Y3/TiQZDQOXE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320471 (0x4e3d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87e2d1044b2d3cea1798d05fa76266bef1de1574
        Validity
            Not Before: Apr 15 03:20:26 2024 GMT
            Not After : Apr 18 06:22:26 2024 GMT
        Subject: CN=690f340c9744d3ef34811bbe4593f9e1cf8c2ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:84:f1:a5:4a:22:08:19:7e:7b:01:b9:d4:10:
                    69:ea:67:f9:32:5b:1c:c7:54:84:f2:3b:a9:35:20:
                    5b:93:19:09:f9:90:0d:cd:20:9f:ec:70:3a:eb:5b:
                    ab:b7:bc:3c:65:d1:40:ac:eb:a5:23:ac:4b:d3:92:
                    44:0b:f4:83:26:1f:08:9f:3b:a4:2b:fc:c7:2f:a5:
                    70:51:dc:3c:70:fd:e6:e9:d1:d0:00:6e:0d:c3:ac:
                    b9:77:5f:11:92:b7:44:e0:11:28:cf:a0:38:2b:55:
                    33:fe:c6:45:b8:df:37:d2:89:d0:bf:a3:dc:f0:67:
                    0c:ec:86:fd:56:dc:d8:2d:9a:36:01:8c:0b:34:50:
                    4d:8e:5e:15:e3:0b:14:83:b4:ff:eb:7b:43:2c:07:
                    2b:b2:1f:2a:14:5c:e2:2f:e6:f1:d0:13:1a:d8:b9:
                    d6:c3:97:93:af:e5:21:c2:d1:bc:b5:98:e6:96:38:
                    68:b2:5f:4f:bc:fe:c8:7f:89:66:28:73:bd:e8:9e:
                    5b:69:84:ea:64:d3:9a:81:37:e4:35:89:7e:eb:b1:
                    f8:9f:ea:88:76:24:cd:13:6a:6c:06:32:00:f1:f1:
                    29:bb:20:3e:86:71:00:13:e0:d3:9d:1b:fb:73:27:
                    d5:bc:31:00:a8:db:c0:bf:7f:ae:74:af:7b:95:90:
                    d1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7E:48:EA:A8:F0:58:E8:EF:35:DE:83:18:A3:F6:BB:B2:41:81:7D
            X509v3 Authority Key Identifier:
                keyid:72:F6:C8:E3:79:00:47:B2:F7:95:DD:D7:A3:29:63:EA:E9:6D:22:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87e2d1044b2d3cea1798d05fa76266bef1de1574.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/afcaaaa5-f490-41a9-9427-d1f11ebe39a0/87e2d1044b2d3cea1798d05fa76266bef1de1574.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/afcaaaa5-f490-41a9-9427-d1f11ebe39a0/87e2d1044b2d3cea1798d05fa76266bef1de1574.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:63:79:89:2c:71:38:a3:a7:94:66:7e:a1:70:89:35:20:ee:
         61:85:48:0e:f2:66:92:a2:d1:24:1d:ef:c4:d3:39:96:b8:55:
         42:6b:c7:96:67:f8:e9:8d:a9:21:61:84:c3:b4:a4:7c:13:70:
         28:b0:fb:be:04:8e:d9:de:98:23:23:8f:0c:7e:3e:a9:d8:3f:
         14:3e:a6:c3:7c:6d:f5:2d:84:44:ab:8a:94:d1:f4:a1:3e:80:
         63:43:34:c3:7b:f9:61:54:5c:26:06:f8:4e:4d:cf:19:35:8a:
         2f:f2:1d:56:61:0f:fe:48:c6:f2:82:ad:83:31:ac:4a:99:1b:
         66:05:01:bf:80:ab:51:a3:6c:c6:c4:2d:6f:37:c5:13:ba:de:
         a7:73:9d:a7:08:24:0b:ec:99:cd:5e:9c:27:14:99:57:49:fc:
         28:cb:13:2e:38:98:d7:8e:fe:53:2d:a3:11:67:fa:d6:b5:e1:
         be:10:3b:19:7d:6b:d1:4b:ad:04:32:ad:e8:2e:c1:23:d9:5f:
         9b:21:03:5c:37:28:f1:37:93:e1:53:c5:1d:88:11:a5:86:1f:
         6b:ff:c4:54:a5:f0:30:08:c1:bb:a3:de:5c:21:b3:72:ea:30:
         ee:2d:1d:60:c4:06:05:b8:38:74:5f:c1:a9:08:67:9f:2b:cb:
         81:40:41:38
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDBOPXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg3
ZTJkMTA0NGIyZDNjZWExNzk4ZDA1ZmE3NjI2NmJlZjFkZTE1NzQwHhcNMjQwNDE1
MDMyMDI2WhcNMjQwNDE4MDYyMjI2WjAzMTEwLwYDVQQDEyg2OTBmMzQwYzk3NDRk
M2VmMzQ4MTFiYmU0NTkzZjllMWNmOGMyYWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0oTxpUoiCBl+ewG51BBp6mf5Mlscx1SE8jupNSBbkxkJ+ZAN
zSCf7HA661urt7w8ZdFArOulI6xL05JEC/SDJh8InzukK/zHL6VwUdw8cP3m6dHQ
AG4Nw6y5d18RkrdE4BEoz6A4K1Uz/sZFuN830onQv6Pc8GcM7Ib9VtzYLZo2AYwL
NFBNjl4V4wsUg7T/63tDLAcrsh8qFFziL+bx0BMa2LnWw5eTr+UhwtG8tZjmljho
sl9PvP7If4lmKHO96J5baYTqZNOagTfkNYl+67H4n+qIdiTNE2psBjIA8fEpuyA+
hnEAE+DTnRv7cyfVvDEAqNvAv3+udK97lZDRsQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFAR+SOqo8Fjo7zXegxij9ruyQYF9MB8GA1UdIwQYMBaAFHL2yON5AEey95Xd
16MpY+rpbSKiMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODdlMmQx
MDQ0YjJkM2NlYTE3OThkMDVmYTc2MjY2YmVmMWRlMTU3NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWZjYWFhYTUtZjQ5MC00MWE5LTk0MjctZDFmMTFl
YmUzOWEwLzg3ZTJkMTA0NGIyZDNjZWExNzk4ZDA1ZmE3NjI2NmJlZjFkZTE1NzQu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hZmNhYWFhNS1mNDkwLTQxYTktOTQyNy1kMWYx
MWViZTM5YTAvODdlMmQxMDQ0YjJkM2NlYTE3OThkMDVmYTc2MjY2YmVmMWRlMTU3
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAFhjeYkscTijp5RmfqFwiTUg7mGFSA7yZpKi0SQd78TTOZa4
VUJrx5Zn+OmNqSFhhMO0pHwTcCiw+74EjtnemCMjjwx+PqnYPxQ+psN8bfUthESr
ipTR9KE+gGNDNMN7+WFUXCYG+E5Nzxk1ii/yHVZhD/5IxvKCrYMxrEqZG2YFAb+A
q1GjbMbELW83xRO63qdznacIJAvsmc1enCcUmVdJ/CjLEy44mNeO/lMtoxFn+ta1
4b4QOxl9a9FLrQQyreguwSPZX5shA1w3KPE3k+FTxR2IEaWGH2v/xFSl8DAIwbuj
3lwhs3LqMO4tHWDEBgW4OHRfwakIZ58ry4FAQTg=
-----END CERTIFICATE-----